1. Data controller
The data controller is MioMattone – PROVISIONAL LEGAL DETAILS, with provisional registered address at Via Esempio 1, 00100 Rome (RM), Italy.
Provisional VAT number: IT00000000000. Provisional tax code: 00000000000.
For matters concerning personal data protection, the controller can be contacted at privacy@miomattone.it.
2. Data we process
MioMattone processes personal data provided directly by users, data required to provide its services and technical data generated while using the platform.
- Real estate agency and administrator data, including agency name, email address, telephone number and account credentials.
- Information entered in agency profiles and property listings.
- Information submitted through contact forms, property enquiries and property valuation requests.
- Subscription, purchase and payment status information.
- Information relating to the use of artificial intelligence features.
- Technical and security information, including server requests, application events and logs required for operation and protection of the platform.
3. Purposes and legal bases
Personal data is processed for purposes related to the operation, security and provision of MioMattone services.
- Creating and managing accounts and registered agencies: performance of a contract or pre-contractual measures requested by the data subject.
- Publishing and managing property listings: performance of the requested service.
- Managing contact, property and valuation enquiries: pre-contractual measures requested by the data subject.
- Managing subscriptions, credit purchases and payments: performance of a contract and compliance with applicable administrative, accounting and tax obligations.
- Sending service communications concerning accounts, trials, subscriptions, payments and security: performance of the contract and legitimate interest in properly managing the service.
- Preventing abuse, fraud and automated misuse: legitimate interest in protecting the platform and its systems.
- Providing artificial intelligence features requested by the user: performance of the requested service.
- Compliance with legal obligations and requests from competent authorities: compliance with a legal obligation.
4. Property information
Agencies may upload information, text, images and other content relating to properties published through the platform.
An agency uploading content containing personal data is responsible for ensuring that it has an appropriate legal basis for communicating and publishing that information through MioMattone.
5. User enquiries and leads
When a user submits a property enquiry, contact request or valuation request, the information provided may be disclosed to the relevant real estate agency so that it can respond.
The recipient agency will subsequently process that information under its own responsibilities and privacy information.
6. Payments through Stripe
MioMattone uses Stripe to process payments relating to subscriptions and other purchases made through the platform.
Information required to complete a payment is processed by Stripe under its own terms and privacy information. MioMattone retains the information required to associate a payment with an account, verify transaction status and manage the purchased service.
MioMattone does not need to directly store full payment card details used through Stripe Checkout.
7. Email communications
MioMattone uses Zoho email infrastructure to send communications relating to the service.
Information required to deliver those messages may therefore be processed by the email service provider under its own terms and privacy information.
8. Abuse protection with Cloudflare Turnstile
Some MioMattone forms use Cloudflare Turnstile to distinguish legitimate interactions from automated or abusive attempts.
Technical information required to perform this security check may be processed when the service is used.
9. Artificial intelligence features
MioMattone provides agencies with artificial intelligence features for activities such as generating and improving property content, translations and SEO optimisation.
To provide these features, information required for the request may be transmitted to Google services used by MioMattone for processing through Gemini models.
Agencies should not include unnecessary personal data, special-category data or other confidential information in AI requests unless strictly necessary for the requested content.
10. OpenStreetMap maps
Property pages may display maps based on OpenStreetMap.
When a map is loaded, the user's browser may make requests to servers used to provide map resources, resulting in the processing of technical information required for network communications.
11. Data retention
Data is retained for as long as necessary for the purposes for which it was collected and thereafter for any period required by applicable law or necessary to protect the controller's rights.
Account and service data is normally retained for the duration of the relationship with the user. Administrative and transaction information may be retained for longer where required by tax, accounting or civil law.
Final retention periods will be reviewed and formalised before commercial launch.
12. Recipients
Data may be processed by providers supplying technical and organisational services necessary for MioMattone to operate, within the limits of their respective functions.
- hosting and server infrastructure providers;
- email providers, currently Zoho;
- Stripe for payment processing;
- Cloudflare for Turnstile functionality;
- Google for AI features based on Gemini models;
- services used to display OpenStreetMap maps;
- consultants and authorised parties where required for legal, administrative or security purposes.
13. International transfers
The use of certain technology providers may involve processing in countries other than the user's country or outside the European Economic Area.
Before commercial launch, the production providers, processing locations and safeguards required by applicable law for any international transfers will be reviewed.
14. Security
MioMattone adopts technical and organisational measures intended to protect data and accounts against unauthorised access, loss, alteration or misuse.
Account passwords are not stored in plain text and are protected using hashing techniques.
However, no information system can guarantee absolute security.
15. Data subject rights
Where provided by applicable law, data subjects may request access to, rectification or deletion of their personal data, restriction of processing, data portability and may object to processing.
Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
Requests may be sent to privacy@miomattone.it.
16. Complaints
Data subjects have the right to lodge a complaint with the competent supervisory authority. In Italy, the competent authority is the Garante per la protezione dei dati personali.
17. Changes to this policy
This policy may be updated following changes to applicable law, technology or the services offered by MioMattone.
The updated version will be made available on this page together with the date of the latest revision.